High-risk tools in Pwndbg
5 of the 17 tools in Pwndbg are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
debug_controlExecutedebug_control
-
interrupt_processExecuteInterrupt target process through PTY. Equivalent to press Ctrl-C, Ctrl-Z or Ctrl-D
-
load_executableExecuteLoad an executable file into GDB and set up PTY for process I/O.
-
eval_to_send_to_processExecuteeval_to_send_to_process
-
send_to_processExecuteSend data to the target process through PTY in raw mode.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.